About the role
As a Senior Security Architect – IAM/PAM, you will make an impact by acting as the primary technical authority bridging Security Operations (SecOps), Identity and Access Management (IAM), Privileged Access Management (PAM), and Endpoint Detection and Response (EDR) — designing, implementing, and maintaining secure infrastructure across our SailPoint, CyberArk, and CrowdStrike platforms.
You will be a valued member of the Security Operations team and work collaboratively with IAM, PAM, and EDR teams, business owners, application teams, HR, security stakeholders, and vendors to translate business requirements into secure, compliant configurations.
In this role, you will:
- Lead SailPoint IDN and CyberArk architecture and delivery — serve as technical lead for deployments, upgrades, and integrations, including connectors, workflows, rules, role models, and Dev/QA/Prod migrations.
- Own the identity governance lifecycle — define and implement Joiner-Mover-Leaver (JML) processes, build RBAC frameworks and entitlement catalogues, maintain Separation of Duties (SoD) policies, and run access certification/recertification campaigns.
- Drive EDR detection and response — lead the review and management of CrowdStrike Falcon alerts and SIEM policies, and collaborate with security teams to strengthen threat detection and response capabilities.
- Ensure regulatory compliance and audit readiness — align IAM/PAM/EDR operations with frameworks such as APRA CPS 234/230, NIST, GDPR, ISO 27001, and HIPAA/PCI-DSS, and produce compliance reports and evidence packages for internal and external audits.
- Integrate and document enterprise systems — connect SailPoint IDN with Active Directory, Azure AD/Entra ID, Workday, SAP, and ServiceNow via SCIM, REST/SOAP APIs, and JDBC; write and maintain Bean Shell/Java rules, workflows, and reporting dashboards; and keep solution design documents, runbooks, and operational guides current.
Work model
We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role's business requirements, this is a hybrid position in a client or Cognizant office in Brisbane, Queensland. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in, as well as business and client requirements. Rest assured, we will always be clear about role expectations.
What you need to have to be considered
- Strong, hands-on experience with SailPoint IdentityNow (IDN) and CyberArk (certified)
- Working experience with CrowdStrike Falcon EDR, Airlock Digital, Active Directory, and GRC tools
- Application integration experience using SCIM, REST/SOAP APIs, and JDBC to connect Active Directory, Azure AD/Entra ID, Workday, SAP, and ServiceNow
- Strong understanding of identity governance principles, including RBAC, SoD, least privilege, and JML lifecycle management
These will help you stand out
- SailPoint Certified IdentityIQ / ISC Architect
- CyberArk Certified Delivery Engineer (CDE) or Trustee
- CrowdStrike Certified Engineer (CCE), CrowdStrike Certified Falcon Administrator (CCFA), or above
- ITIL Foundation certification
- Experience in large-scale enterprise environments (10,000+ identities) and exposure to Zero Trust architecture principles
Qualifications/Certifications
- SailPoint Certified IdentityIQ / ISC Architect
- CyberArk Certified Delivery Engineer (CDE) or Trustee
- CrowdStrike Certified Engineer (CCE) or CrowdStrike Certified Falcon Administrator (CCFA), or above
- ITIL Foundation certification
Salary Range: >$100,000
Date of Posting: 03-Jul-26
Next Steps: If you feel this opportunity suits you, or Cognizant is the type of organization you would like to join, we want to have a conversation with you! Please apply directly with us.
For a complete list of open opportunities with Cognizant, visit http://www.cognizant.com/careers. Cognizant is committed to providing Equal Employment Opportunities. Successful candidates will be required to undergo a background check.
コグニザントについて
コグニザント（NASDAQ: CTSH）は、AI Builderおよびテクノロジーサービスプロバイダーとして、お客様にフルスタックのAIソリューションを構築することで、AI投資と企業価値を結ぶ架け橋となっています。業界、ビジネスプロセス、エンジニアリングに関する当社の深い専門知識を活かし、組織固有のビジネス環境をテクノロジー・システムに組み込みます。これにより、人間の可能性を最大限に引き出し、確かな成果を実現するとともに、急速に変化する世界においてグローバル企業が常に一歩先を行くための支援を行っています。 詳細については、cognizant.ai をご覧ください。
雇用に関する追加情報
本募集に記載されている報酬情報は、掲載日時点で正確なものです。Cognizantは、適用される法令に従い、いつでも本情報を変更する権利を留保します。
応募者は、対面またはビデオ会議による面接への参加を求められる場合があります。また、各面接の際に、現在有効な州政府または政府発行の身分証明書の提示を求められる場合があります。
Cognizantは機会均等雇用主です。応募および選考において、人種、肌の色、性別、宗教、信条、性的指向、性自認、国籍、障がい、遺伝情報、妊娠、退役軍人の地位、その他連邦法・州法・地方自治体の法律により保護されるいかなる特性に基づく差別も行いません。
